CVEs published in May 2025
4,042 vulnerabilities, 366 critical, 19 exploited.
- sap se digital manufacturing (production operator dashboard)Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard)5.3 Medium
- sap se s/4hana (private cloud & on-premise)Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise)6.4 Medium
- sap se s4/hana (odata meta-data property)Missing Authorization check in SAP S4/HANA (OData meta-data property)4.3 Medium
- sap se business objects business intelligence platform (pmw)Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW)7.9 High
- sap netweaver, sap se netweaver (visual composer development server) +1 moreInsecure Deserialization in SAP NetWeaver (Visual Composer development server)9.1 Critical
- sap se gateway clientInformation Disclosure vulnerability in SAP Gateway Client6.6 Medium
- sap se netweaver application server abap and abap platformInformation Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform6.2 Medium
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)8.6 High
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)10.0 Critical
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)5.3 Medium
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)6.1 Medium
- sap supplier relationship management, sap se supplier relationship management (live auction cockpit) +1 moreMultiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)6.1 Medium
- sap se data services management consoleCross-Site Scripting (XSS) vulnerability in the SAP Data Services Management Console4.4 Medium
- varnish-software varnish cacheVarnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow...5.4 Medium
- davidstutz bootstrap multiselectBootstrap Multiselect Vulnerable to CSRF and Reflective XSS via Arbitrary POST Data6.1 Medium
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the...5.4 Medium
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the...5.4 Medium
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr...9.8 Critical
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the...5.4 Medium
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr...9.8 Critical
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the...9.8 Critical
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr...5.4 Medium
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability...9.8 Critical
- edimax cv-7428ns firmwareEDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via...9.8 Critical
- zkteco zkbio cvsecurityIn ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the...6.5 Medium
- engineercms project engineercmsEngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject...9.8 Critical
- cpplusworld cp-xr-de21-s firmwareCP-XR-DE21-S -4G Router Firmware version 1.031.022 was discovered to contain insecure protections...5.1 Medium
- owladmin owl adminowl-admin v3.2.2~ to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/admin_menus...7.2 High
- ruifang-tech rebuildrebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component.9.8 Critical
- shinnku upset-gal-webupset-gal-web v7.1.0 /api/music/v1/cover.ts contains an arbitrary file read vulnerabilit7.5 High
- microsoft .net, build tools, .net 8.0 +7 more +9 more.NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability8.0 High
- oxid-esales eshopOXID eShop May Display User Information4.9 Medium
- jokob-sk netalertxNetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can...8.6 High
- jokob-sk netalertxNetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via...10.0 Critical
- siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0), simatic s7-1500 cpu 1518f-4 pn/dp mfp (6es7518-4fx00-1ab0) +2 more +4 moreExposure of Sensitive Information in Shared Microarchitectural Structures during Transient...5.7 Medium
- kashipara group billing softwareBilling Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- kanboardKanboard has stored Cross-site Scripting vulnerability in project name1.3 Low
- apple ipados, macos +1 moreA privacy issue was addressed by removing sensitive data. This issue is fixed in iPadOS 17.7.7,...5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.8 High
- apple macosAn information disclosure issue was addressed with improved privacy controls. This issue is fixed...5.5 Medium
- apple macosAn input validation issue was addressed by removing the vulnerable code. This issue is fixed in...7.8 High
- apple ipados, macos, tvos +4 more +6 moreA double free issue was addressed with improved memory management. This issue is fixed in watchOS...5.3 Medium
- apple ipados, macos, safari +6 more +8 moreThis issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS...4.7 Medium
- apple macosThe issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15...5.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved input validation. This issue is fixed in watchOS 11.5, tvOS...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...5.5 Medium
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.6, macOS...7.5 High
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.5....6.5 Medium
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.6, macOS...7.5 High
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- Show moreLoading…